00. Profiling the “Jabber ZeuS” Rogue Botnet Enterprise - An Analysis 
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We've decided to take a peek at the prolific “Jabber ZeuS” gang using exclusively public and 
proprietary sources for the purpose of offering an additional insight into the online infrastructure 
of the cybercriminals in question using Matelgo in combination with WhoisXML API’s integration 
and came up with some pretty interesting results in the context of exposing additional domains 
registered by the original “Jabber ZeuS” gang which could greatly assist researchers and 
vendors on their way to track down the cybercriminals behind these campaigns. 
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Related responding IPs for the associated domains known to have participated in the 


campaign: 
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Related MD5s known to have been communication with the responding IPs part of this 
campaign’s infrastructure: 
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We'll continue monitoring the campaign and post updates as soon as new developments take 
place for the purpose of providing and offering additional actionable intelligence on the online 
infrastructure behind this campaign and the “Jabber ZeuS” gang. 


